Sam & Claude a5139b5f7f security(docs): mask Tailscale IPs + bot handles behind fleet.env

Real tailnet IPs and Telegram bot handles were being committed in docs/
memories/skills. Scrubbed all tracked markdown to ${VAR} placeholders; real
values now live in fleet.env (gitignored) and stay live via 'tailscale status'.

- add fleet.env.example (committed) + fleet.env (gitignored); .gitignore *.env
- AGENTS.md + HOST-MATRIX: masking convention so it can't recur
- also: domedog registered as Colibri agent (image-render/ffmpeg/build lane);
  correct CAPABILITY-ROUTING example to real registered caps (domedog headless)

Past commits not rewritten (history moves to Codeberg at v1.0); this fixes HEAD.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-19 18:19:32 +02:00

1.6 KiB

Raw Blame History

USER — Operator Context

Sam (the operator)

Location: Slovenia (Gomila area, near Novo mesto) Language: English for all technical work (English-only policy since 2026-05-27) TTS voice preference: sl-SI-RokNeural (Slovenian)

Communication

Primary channel: Telegram (${HERMES_BOT} + ${ZOT_BOT} in "My Debby" group)
Style: concise, action-only. No fluff. Graphs and tables over prose.
Review preference: structured summaries first, raw detail on demand
For Clawdie IMG completion: single-line dd command only, no extra report

Infrastructure preferences

Self-hosted over SaaS — always
Zero public exposure — Tailscale for everything
Each agent/host gets its own SSH key — never copy private keys
Vaultwarden at vault.smilepowered.org for secrets
Forgejo at code.smilepowered.org for code (SSH port 2222)
Commit email: hello@clawdie.si for all project commits

Work style

Plan/test first, implement second
E2E testing with reproducible artifacts (manifests, checksums, versioned scripts)
Local-first media processing (faster-whisper, Blender, matplotlib)
Documents systemic risks, not just fix symptoms
Proactive cleanup — /tmp is for transient data, projects go in ~/Blender/

Projects

Clawdie: FreeBSD-based edge computing and agent runtime
Colibri: Cross-platform Rust control plane core (12 crates)
Herdr: Terminal workspace manager
layered-soul: This repository — portable agent identity

Transport

Frequently uses Slovenian Railways from Gomila. Routes: Gomila↔Mirna, Gomila→Trebnje, Gomila→Novo mesto. Check both SŽ train and Nomago bus timetables for connections.

1.6 KiB Raw Blame History